Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUOBrxGQke3GnrmmCA1Htk3AkVM.roa
File: dUOBrxGQke3GnrmmCA1Htk3AkVM.roa (raw, json)
Hash identifier: Q6CoOoKDE/J/n14jVU7iYnmEofYkfUx4779u+0ihgZY=
Subject key identifier: 75:43:81:AF:11:90:91:ED:C6:9E:B9:A6:08:0D:47:B6:4D:C0:91:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E64880F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUOBrxGQke3GnrmmCA1Htk3AkVM.roa
Signing time: Mon 28 Feb 2022 07:08:44 +0000
ROA not before: Mon 28 Feb 2022 07:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852082191 (0x6e64880f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 07:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=754381af119091edc69eb9a6080d47b64dc09153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:f4:05:3d:80:1a:6b:58:f6:f8:fd:5c:58:
67:65:2a:53:e1:5f:fa:33:99:e7:7a:1c:3d:3d:9c:
ae:ac:e5:e6:8b:12:91:01:47:5c:32:7b:84:3d:ce:
4c:78:dd:b4:60:9a:44:47:99:82:00:50:07:ff:2f:
e9:e4:15:54:d0:12:d5:4e:d6:42:15:5d:1e:58:8e:
5a:c1:0b:cc:e7:f7:98:1e:1d:27:5b:0b:e4:eb:cd:
47:b8:38:df:4e:43:c6:2e:56:99:c2:73:bb:2e:44:
5d:57:f3:a7:f6:47:1d:05:d1:0a:46:ad:de:bd:6f:
1d:7b:5c:ae:92:0e:46:ea:92:27:1b:70:dd:a8:94:
9f:a3:e7:63:73:ad:23:f5:7b:e2:e2:2e:ff:93:56:
ca:c5:15:c0:91:43:09:c2:23:38:4b:e9:50:54:77:
29:6d:ca:44:1a:68:32:b8:00:92:77:7b:15:b0:1d:
89:23:f1:e8:a1:99:9e:72:56:ca:3b:03:89:66:c6:
42:e2:cd:fe:46:48:6d:d5:56:2f:80:7d:8a:8f:c4:
cd:3b:b1:8a:9c:0f:7c:d3:be:c9:95:8e:39:f0:ae:
e4:1b:c5:15:da:88:46:ad:e9:fc:60:f9:ea:21:9f:
a7:05:b7:3e:37:b5:16:95:97:61:b4:e3:48:d6:72:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:81:AF:11:90:91:ED:C6:9E:B9:A6:08:0D:47:B6:4D:C0:91:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUOBrxGQke3GnrmmCA1Htk3AkVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:8d:bb:6e:0c:1c:56:c9:4d:25:67:2f:02:5f:29:e3:5c:6f:
28:4c:e7:68:ce:2e:92:4c:2e:c3:1c:cd:24:63:5f:6c:ae:35:
84:78:98:e0:88:72:0e:b0:78:46:f2:8e:16:6f:ef:83:17:fa:
08:e0:51:e2:95:3e:20:4b:b0:7f:b5:1b:03:a8:16:12:0e:e1:
f5:9f:e5:d0:af:20:e9:ff:ac:ee:03:82:17:3d:32:5f:66:bb:
fd:e7:35:e6:dd:a3:bb:da:b4:0c:75:bf:41:e1:b5:45:7f:47:
2e:c7:1e:73:56:dd:79:27:68:81:b4:89:f7:8a:fa:d6:4b:b9:
8f:c3:b6:ff:79:de:44:0f:ed:c4:90:0d:c7:7b:d0:e9:2e:63:
9f:c7:88:cd:d8:4f:a8:3c:28:00:61:89:8b:16:0c:10:a0:f3:
fd:65:f3:66:2e:85:52:f5:3e:36:10:b2:07:66:1a:e6:c3:bb:
36:04:45:9c:a9:fc:51:82:87:b4:aa:9e:d4:e5:8e:f0:18:28:
04:44:97:af:30:79:5f:34:c6:d9:0d:33:76:7b:42:24:ec:f7:
4a:08:b7:da:fd:8b:3c:b7:62:17:c2:d0:73:11:3c:a1:ff:3e:
41:13:9d:1a:bc:99:c1:d7:6e:77:4c:74:eb:83:00:d1:3f:26:
c9:61:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:59 2025 by rpki-client